Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Chinese-language helper for publishing videos to specified social platforms, with no evidence of hidden credential storage, persistence, or destructive behavior.
Install only if you are comfortable letting an agent guide or automate actions in a browser where your social accounts are already logged in. Confirm the exact platform, file, title, description, tags, and final publish action before proceeding, and consider testing with a non-primary account first.
The trigger list includes a catch-all phrase ('类似多平台视频发布需求') that is broad enough to activate on loosely related requests. In a skill that can drive browser automation against logged-in social media accounts, overly broad activation increases the risk of unintended invocation and accidental posting or navigation on sensitive authenticated sessions.
The trigger list ends with a catch-all phrase ('类似多平台视频发布需求'), which is overly broad and can cause the skill to activate for loosely related requests. Because this skill performs browser-driven publishing actions against logged-in social media accounts, accidental invocation could lead to unintended posting workflows or confusing takeover of user intent, even if explicit confirmation is later required.
This Python file contains user-facing natural-language descriptions entirely in Chinese, including the module description and platform metadata, with no indication that the skill is China-specific or that users may select another language. Under the policy, forcing a specific language without user opt-in is a locale/language policy violation.
The file’s natural-language interface and guidance are entirely presented in Chinese, starting from the module description and continuing through user-facing output. There is no indication that the user can choose another language or that the Chinese-only behavior is region-specific and justified, which creates a locale policy concern.
The README presents all user-facing instructions and activation phrases exclusively in Chinese, which may implicitly force a specific language without user opt-in. The file does not state that the skill is intended only for Chinese-speaking users or provide an alternative language option.
